Public Repositories Archives

On Thursday, GitHub declared that all pushes to public repositories will now automatically enable secret scanning push protection. This implies that you will be able to either remove a supported secret from your commits or, if you think the secret is secure, skip the block, whenever a supported secret is found in any push to a public repository. remarked Courtney Claessens and Eric Tooley. Although push protection has been in testing since April 2022, it was first introduced as an opt-in feature in August 2023. May 2023 marked the general release of the product. To stop fraudulent use of tokens by bad actors, the secret scanning tool is designed read more GitHub Rolls Out Default Secret Scanning Push Protection for Public Repositories. Get up to date on the latest cybersecurit...

Cybersecurity experts are alerting companies to the possibility of supply chain attacks due to publicly disclosed Kubernetes configuration secrets. In a new study released earlier this week, Aqua security researchers Yakir Kadkoda and Assaf Morag stated that these encoded Kubernetes configuration secrets had been uploaded to public repositories. According to the cloud security firm, which used the GitHub API to retrieve all entries containing the extensions.dockerconfigjson and.dockercfg—which store credentials for accessing a container image registry—among those affected are two of the leading blockchain companies and several other Fortune 500 companies read more Kubernetes Secrets of Fortune 500 Companies Exposed in Public Repositories. Get up to date on the latest cybersecurit...